CN214540936U

CN214540936U - Circuit structure and POS machine that possess safety protection function

Info

Publication number: CN214540936U
Application number: CN202120907333.8U
Authority: CN
Inventors: 黄茂涵; 苏小燕
Original assignee: PAX Computer Technology Shenzhen Co Ltd
Current assignee: PAX Computer Technology Shenzhen Co Ltd
Priority date: 2021-04-28
Filing date: 2021-04-28
Publication date: 2021-10-29
Anticipated expiration: 2031-04-28

Abstract

The embodiment of the application provides a circuit structure with a safety protection function and a POS machine, wherein the circuit structure comprises a circuit substrate; a first device disposed on a top layer of the circuit substrate; the second device is arranged on the top layer, and the first device and the second device transmit an electric signal containing sensitive data through a first routing wire of a first middle layer arranged below the top layer; the third device and other devices transmit high-frequency signals through a second routing wire of a second middle layer arranged below the first middle layer, and the projection of the second routing wire in the direction perpendicular to the top layer covers the first routing wire. The second routing covers the first routing, covers the first routing for transmitting sensitive data, prevents the first routing from being directly attacked by the outside, saves pin resources of a pointer signal line and a safety CPU (central processing unit) for generating the pointer signal line, and is favorable for product design.

Description

Circuit structure and POS machine that possess safety protection function

Technical Field

The application belongs to the technical field of electronic circuits, and particularly relates to a circuit structure with a safety protection function and a POS machine.

Background

In order to prevent sensitive information from leaking, a conventional financial terminal, such as a POS (point of sale) machine, uses a pointer signal line to cover a sensitive device and a sensitive signal wire in a circuit board, and a part of the pointer signal line itself needs to be covered by the pointer signal wire. The pointer signal line is a signal line which is generated by a Central Processing Unit (CPU) and whose level change can be detected by a detection circuit, and when the detection circuit detects that the level on the signal line is inconsistent with a set level value, the detection circuit triggers a protection mechanism of the secure CPU to erase keys and other sensitive information.

Currently, in order to make the traces in the circuit board meet the safety requirements, the number of layers of the circuit board is generally increased to increase the trace of the pointer signal, so as to protect the sensitive device, the trace of the sensitive signal and the pointer signal. However, increasing the number of layers makes the circuit board manufacturing process more complicated and costly. Moreover, in order to protect the sensitive device, the sensitive wire and the pointer wire, the pointer signal winding is added, which has a higher requirement on the number of pointer pins of a Central Processing Unit (CPU), and the secure CPU needs to have more pointer pins, occupies more CPU pin resources, and is not favorable for product design.

SUMMERY OF THE UTILITY MODEL

An object of this application is to provide a circuit structure and POS machine that possess safety protection function, aim at solving traditional circuit board design and can occupy more central processing unit pin resource for preventing that sensitive information from revealing, be unfavorable for the problem of product design.

The embodiment of the application provides a circuit structure who possesses safety protection function, including circuit substrate, circuit substrate is the multiply wood, circuit structure still includes:

a first device disposed on a top layer of the circuit substrate;

the second device is arranged on the top layer, and the first device and the second device transmit an electric signal containing sensitive data through a first routing wire of a first middle layer arranged below the top layer;

and the third device and other devices transmit high-frequency signals through a second routing wire of a second middle layer arranged below the first middle layer, wherein the projection of the second routing wire in the direction perpendicular to the top layer covers the first routing wire.

In one embodiment, a mesh winding is further arranged, the mesh winding is arranged in a third middle layer below the second middle layer, and a projection of the mesh winding in a direction perpendicular to the top layer covers the second trace.

In one embodiment, the mesh winding is formed by mutually combining more than two signal lines in a third middle layer to form a loop line, and the signal lines comprise at least one pointer signal line.

In one embodiment, the signal line is connected to the first device or the second device.

In one embodiment, the other device is the first device or the second device.

In one embodiment, the third device is the same device as the first device or the second device.

In one embodiment, the first device is a secure CPU or controller that stores sensitive data.

In one embodiment, the circuit board further comprises a via hole protection component arranged at the bottom layer of the circuit substrate, and a projection of the via hole protection component in a direction perpendicular to the top layer covers the via hole connected with the first wire, the second wire and the mesh winding.

In one embodiment, the via protection component is a tamper switch, other circuit substrate, or a stiffener.

The embodiment of the application provides a POS machine, which comprises the circuit structure with the safety protection function.

The circuit structure and POS machine that possess the safety protection function that this application embodiment provided, through will be used for transmitting the first line setting of walking of sensitive data in the middle routing layer that is close to top layer one side, the middle routing layer under the first line place intermediate level of walking thereafter still sets up the second that is used for transmitting high frequency signal and walks the line and shelter from first walking, including the first line cladding of walking of will transmitting sensitive data, in case first line directly receives external attack, and because the second of transmitting high frequency signal walks the line and requires highly, be difficult to restore after being destroyed, will lead to equipment this function to make unusable, consequently, the second is walked its self and is had the attack prevention function. Through so setting up, can not need to use the pointer signal line to come to cover the protection to the circuit of transmission sensitive signal, saved the pin resource of the safe CPU of pointer signal line and production pointer signal line, be favorable to the design of product.

Drawings

Fig. 1 is a schematic diagram of a circuit structure with a safety protection function according to a first embodiment of the present application;

fig. 2 is a schematic diagram of a circuit structure with a safety protection function according to a second embodiment of the present application;

fig. 3 is a schematic structural diagram of a mesh winding in the circuit structure with the safety protection function shown in fig. 2;

fig. 4 is a schematic structural diagram of a via hole and a protection component in the circuit structure with a safety protection function shown in fig. 1 or fig. 2.

Detailed Description

In order to make the technical problems, technical solutions and advantageous effects to be solved by the present application clearer, the present application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.

It will be understood that when an element is referred to as being "secured to" or "disposed on" another element, it can be directly on the other element or be indirectly on the other element. When an element is referred to as being "connected to" another element, it can be directly connected to the other element or be indirectly connected to the other element.

It will be understood that the terms "length," "width," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," "outer," and the like, refer to an orientation or positional relationship illustrated in the drawings for convenience in describing the present application and to simplify description, and do not indicate or imply that the referenced device or element must have a particular orientation, be constructed and operated in a particular orientation, and thus should not be construed as limiting the present application.

Furthermore, the terms "first", "second" and "first" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of the present application, "a plurality" means two or more unless specifically limited otherwise.

Before describing the embodiments of the present application, terms that may be related to the embodiments of the present application are explained, for example:

sensitive data: including passwords, account data, prompting messages, keys to encrypt the passwords or accounts, and other sensitive data related to financial services.

Sensitive parts (components): and devices capable of storing or processing sensitive data and pointer data, such as a secure CPU, a controller (such as a micro processing chip like a single chip), a capacitor or a resistor, and the like.

Sensitive path: refers to the sensitive components and routing network that may transmit sensitive data and pointer data.

Pointer data: including all the pointer pins of the secure CPU and the sensitive components and routing network connected thereto.

Referring to fig. 1, a circuit structure with a safety protection function, which can be applied to financial consumption devices such as POS machines, provided in the embodiments of the present application, includes a circuit substrate 10, where the circuit substrate 10 is a multilayer board, and the circuit structure further includes a first device 21, a second device 22, and a third device 23.

The first device 21 is arranged on the top layer 11 of the circuit substrate 10 and the second device 22 is arranged on the top layer 11 of the circuit substrate 10, wherein the first device 21 and the second device 22 are sensitive components. The transmission of electrical signals containing sensitive data between the first device 21 and the second device 22 through the first tracks 31 of the first intermediate layer 12 arranged below the top layer 11; the third device 23 is disposed on the top layer 11 of the circuit substrate 10, and the third device 23 and other devices transmit high-frequency signals through the second trace 32 of the second middle layer 13 disposed below the first middle layer 12, wherein the projection of the second trace 32 in the direction perpendicular to the top layer 11 covers the first trace 31. According to the above, the first intermediate layer 12 is closer to the top layer 11 than the second intermediate layer 13, and the second intermediate layer 13 is between the first intermediate layer 12 and the bottom layer of the circuit substrate 10. And the device and the trace are connected by a via (not shown), and the trace and the via form a complete trace path.

Since the first trace 31 for transmitting sensitive data is disposed below the top layer 11 of the circuit substrate 10, it will be protected from attack by the top layer 11 of the circuit substrate 10. In addition, a second trace 32 for transmitting a high-frequency signal is further disposed on the middle wiring layer below the first middle layer 12 away from the top layer 11 of the circuit substrate 10 to shield the first trace 31, and the first trace 31 for transmitting sensitive data is covered in the middle wiring layer, so as to prevent the first trace 31 from being directly attacked from the outside in the bottom direction of the circuit substrate 10.

Further, in practical applications, the second wire 32 for transmitting the high-frequency signal has a high requirement on the wire, and is difficult to repair after being damaged or attacked, which will cause the function of the device to be unusable, and therefore, the second wire 32 itself has an anti-attack function. Therefore, the circuit for transmitting the sensitive signal can be protected without using a pointer signal line, the pin resources of the pointer signal line and a safety CPU for generating the pointer signal line are saved, and the design of a product is facilitated.

The third device 23 is a component for generating, processing or transmitting a high frequency signal, such as a clock chip, a frequency divider, a processor, etc., which has any functional component for generating, processing or transmitting a high frequency signal. Therefore, the other devices connected to the third device 23 through the second trace 32 may be the first device 21, the second device 22, or other devices besides the first device 21 and the second device 22, which are not strictly limited herein, and the specific circuit is selected according to specific situations, and the selected type may be any functional component having a function of generating, processing, or transmitting a high-frequency signal, such as a clock chip, a frequency divider, a processor, and the like.

Optionally, the third device 23 and the first device 21 or the second device 22 are the same device, so it can be seen that a first trace 31 and a second trace 32 are connected between the first device 21 and the second device 22, and the second trace 32 wraps the first trace 31 in a direction close to the bottom layer 18 of the circuit substrate 10.

Alternatively, the electrical signal transmitted on the first trace 31 may also be a high frequency signal. Optionally, the high frequency signal transmitted on the second trace 32 may also contain sensitive data.

Referring to fig. 2 and fig. 3, in one embodiment, the circuit structure of the present application is further disposed with a mesh winding 33, the mesh winding 33 is disposed on the third middle layer 14 below the second middle layer 13, and a projection of the mesh winding 33 in a direction perpendicular to the top layer 11 covers the second trace 32. Furthermore, the first device 21, the second device 22 and the third device 23 which generate the above-mentioned electrical signals and high-frequency signals are covered to implement anti-attack protection for the sensitive components and the routing path for transmitting sensitive data.

In one embodiment, the mesh winding 33 is formed by combining two or more signal lines with each other in the third middle layer 14 to form a loop, and the signal lines include at least one pointer signal line. The multiple groups of signal line paths form a loop line, wherein two or more groups of pointer signal lines are wound around each other, or one group of pointer signal lines and other signal lines (the level can not be the same as the level of the pointer signal) are wound around each other. Fig. 2 and 3 illustrate two sets of

samper signals

331, 332 wound around each other.

It is understood that the second wire 32 for transmitting high frequency signals can overlap the first wire 31 for transmitting sensitive signals to provide the sensitive signals with safety protection approximately equivalent to one mesh wire 33 layer.

Alternatively, a signal line is connected to the first device 21 or the second device 22, the signal line being provided by the first device 21 or the second device 22.

Referring to fig. 1 to 4, in one embodiment, the circuit structure of the present application further includes a via protection component 50 disposed on the bottom layer 18 of the circuit substrate 10, and a projection of the via protection component 50 in a direction perpendicular to the top layer 11 covers the via 40 connected to the first trace 31, the second trace 32 and the mesh routing 33. The area of the bottom layer 18 projected by the protection mechanism located in the opposite direction of the via 40 on the circuit substrate 10 is a via protection area 522, and a via protection component 50 is disposed on the via protection area 52 for protecting the sensitive signal or the pointer signal from being acquired through the via 40.

Alternatively, the via hole protection component 50 may be any component with a pointer mechanism, such as a tamper switch, a circuit substrate 10 other than the circuit substrate 10 of the present application, or a stiffener, without limitation.

The embodiment of the application provides still another POS machine, including the above circuit structure who possesses the safety protection function.

The circuit structure and POS machine that possess the safety protection function that this application embodiment provided, through will be used for transmitting the first line 31 of walking of sensitive data and set up the middle routing layer that is close to top layer 11 one side, the middle routing layer under first line 31 layer still sets up the second that is used for transmitting high frequency signal and walks line 32 and shelter from first line 31 afterwards, including the first line 31 cladding of walking of transmitting sensitive data, in order to prevent that first line 31 from directly receiving the external attack, and because the second that transmits high frequency signal walks line 32 and requires highly to walk the line, be difficult to restore after being destroyed, will lead to this function of equipment to be unable to use, consequently, it has the anti-attack function to walk line 32 itself for the second. Through so setting up, can not need to use the pointer signal line to come to cover the protection to the circuit of transmission sensitive signal, saved the pin resource of the safe CPU of pointer signal line and production pointer signal line, be favorable to the design of product.

The above embodiments are only used to illustrate the technical solutions of the present application, and not to limit the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present application and are intended to be included within the scope of the present application.

Claims

1. The utility model provides a circuit structure that possesses safety protection function which characterized in that, includes circuit substrate, circuit substrate is the multiply wood, circuit structure still includes:

a first device disposed on a top layer of the circuit substrate;

2. The circuit structure with safety protection function according to claim 1, wherein a mesh winding is further disposed, the mesh winding is disposed at a third middle layer below the second middle layer, and a projection of the mesh winding in a direction perpendicular to the top layer covers the second trace.

3. The circuit structure with safety protection function according to claim 2, wherein the mesh winding is a loop wire formed by two or more signal lines in a third middle layer, and the signal lines comprise at least one pointer signal line.

4. The circuit structure with safety protection function according to claim 3, wherein the signal line is connected to the first device or the second device.

5. A circuit structure with safety protection function according to any one of claims 1 to 3, wherein the other device is the first device or the second device.

6. A circuit structure with safety protection function according to any one of claims 1 to 3, characterized in that the third device is the same device as the first device or the second device.

7. A circuit structure with safety protection function according to any one of claims 1 to 3, characterized in that the first device is a safety CPU or a controller storing sensitive data.

8. The circuit structure with safety protection function according to claim 2, further comprising a via hole protection component disposed on a bottom layer of the circuit substrate, wherein a projection of the via hole protection component in a direction perpendicular to the top layer covers via holes connected to the first trace, the second trace and the mesh wire.

9. The circuit structure with safety protection function according to claim 8, wherein the via hole protection component is a tamper switch, another circuit board or a stiffener.

10. A POS device comprising the circuit structure with a security function according to any one of claims 1 to 9.